Requirement
In addition to controls in the ECC control 2-1, the CSP shall cover the following additional controls for cybersecurity requirements for cybersecurity event logs and monitoring management, as a minimum:
Sub-Controls
2-1-P-1-1
Requirement: Inventory of all information and technology assets using suitable techniques such as Configuration Management Database (CMDB) or similar capability containing an inventory of all technical assets.
2-1-P-1-2
Requirement: Identifying assets owners and involving them in the asset management lifecycle.
References
- ECC – 2:2024 equivalent: 2-1
